Sonatype launches 'Guide' to steer AI coding assistants toward secure open-source dependencies

Summary

Sonatype introduced Guide, an AI-native developer tool that sits between generative coding assistants and open-source repositories to prevent them from recommending vulnerable or hallucinated packages. The platform uses Sonatype’s open source intelligence and an MCP server to intercept package suggestions in real time, automatically upgrading to safer versions and helping enterprises reduce security remediation costs while integrating with tools like GitHub Copilot, Claude Code, and other popular assistants.